Hi Timothy,
this is definitely malware. I can't access the wp-admin login page.
I looked at the 2 links and they appear to be online decoders. I guess you add the php file to the box and it cleans it?
This is not the solution I was looking for as every single php file in the WordPress install and content is infected. Also it keeps coming back - takes about 3 - 4 days.

I have backupbuddy installed on my most of my sites and have cleaned and reloaded them half a dozen time now. I have tried to harden the sites but nothing seems to work. I'm not using any free or even premium themes.

How do you rate me?

Thank you for rating your experience!

We’re thrilled to hear you had a great experience with . Would you like to leave a comment about your experience?
Thanks for voting on your experience with , we’d love to get some feedback please.
Ohh no! We’re really sorry to hear you didn’t have a pleasant experience with , we’re always looking at how we can improve and would appreciate you provide some further feedback here please.
Type your feedback here

it's great that you had a positive one. Based on your experience in this ticket would you please be kind enough to rate us externally on: